HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.


For more information on products and upcoming events around #dominoforever, please visit: HCL Domino Page


Add a new idea Subscribe
Status Needs Review
Workspace Domino
Categories Security
Created by Guest
Created on Sep 17, 2026

RELATED IDEAS

Remove TLS requirement for OIDC Bearer Authentication

We are currently running into a problem on the Domino end using bearer authentication from an OIDC Provider. Our Domino servers sit behind a load balancer in a private network and the load balancer connects to Domino on port 80. All traffic to the load balancer and before is https (ie, public). We have discovered late in the project that Domino requires TLS for bearer auth and we are stuck. This request is to remove the TLS requirement in Domino.

  • Attach files
  • Guest
    Sep 28, 2026

    Support OIDC/OAuth Bearer Authentication behind trusted TLS-terminating reverse proxies

    Domino should allow administrators to configure trusted reverse proxies/load balancers and recognize the original request scheme through the standardized Forwarded: proto=https header defined in RFC 7239 and/or the widely used X-Forwarded-Proto: https header. Forwarded scheme information should only be trusted when the immediate peer is explicitly configured as a trusted proxy, consistent with the security considerations in RFC 7239.

    This would allow deployments where TLS terminates at a load balancer while retaining Domino's bearer-token transport security requirements defined in RFC 6750, rather than globally allowing bearer authentication over unprotected HTTP.


    Reply
                                    Copyright © 2025 HCLSoftware Limited